Skip to content
Fencer Intel

live: new CVEs every 10 minutes, KEV hourly

Every vulnerability. One feed.

The CVE List, GitHub advisories, OSV, NVD, ENISA EUVD and distro advisories merged into one entry per vulnerability, flagged with what attackers actually use: CISA KEV, EPSS and public exploits.

Open the critical feed Check a lockfile

448 new in the last 24 hours, 41 critical in 7 days, 33 added to CISA KEV in 30 days.

vulnerabilities published per day, by severity 9 weeks
kev 77 critical 3,116 high 13,440 medium 13,059 low 1,597 unscored 2,243 Sep 8: 92 critical, 929 high, 514 medium, 33 low, 1 unscored; 4 added to CISA KEV Sep 9: 56 critical, 197 high, 354 medium, 49 low, 12 unscored; 4 added to CISA KEV Sep 10: 56 critical, 189 high, 136 medium, 6 low, 0 unscored; 2 added to CISA KEV Sep 11: 102 critical, 294 high, 137 medium, 12 low, 152 unscored; 4 added to CISA KEV Sep 12: 12 critical, 26 high, 52 medium, 4 low, 1 unscored Sep 13: 3 critical, 44 high, 58 medium, 27 low, 1 unscored Sep 14: 53 critical, 204 high, 357 medium, 65 low, 1 unscored; 1 added to CISA KEV Sep 15: 176 critical, 778 high, 302 medium, 36 low, 0 unscored Sep 16: 104 critical, 371 high, 241 medium, 26 low, 126 unscored; 3 added to CISA KEV Sep 17: 76 critical, 336 high, 142 medium, 26 low, 434 unscored Sep 18: 50 critical, 211 high, 222 medium, 45 low, 0 unscored; 3 added to CISA KEV Sep 19: 8 critical, 23 high, 64 medium, 9 low, 0 unscored Sep 20: 12 critical, 30 high, 48 medium, 15 low, 2 unscored Sep 21: 24 critical, 114 high, 128 medium, 18 low, 3 unscored; 1 added to CISA KEV Sep 22: 84 critical, 177 high, 181 medium, 15 low, 4 unscored; 4 added to CISA KEV Sep 23: 42 critical, 202 high, 228 medium, 33 low, 2 unscored Sep 24: 32 critical, 191 high, 157 medium, 17 low, 174 unscored; 2 added to CISA KEV Sep 25: 22 critical, 188 high, 216 medium, 14 low, 231 unscored; 3 added to CISA KEV Sep 26: 11 critical, 109 high, 113 medium, 11 low, 1 unscored Sep 27: 12 critical, 40 high, 56 medium, 12 low, 1 unscored; 2 added to CISA KEV Sep 28: 43 critical, 105 high, 149 medium, 16 low, 1 unscored Sep 29: 97 critical, 249 high, 232 medium, 41 low, 1 unscored; 1 added to CISA KEV Sep 30: 66 critical, 310 high, 247 medium, 26 low, 0 unscored; 1 added to CISA KEV Oct 1: 53 critical, 165 high, 159 medium, 18 low, 1 unscored; 1 added to CISA KEV Oct 2: 42 critical, 191 high, 174 medium, 10 low, 1 unscored; 2 added to CISA KEV Oct 3: 5 critical, 42 high, 60 medium, 7 low, 0 unscored Oct 4: 6 critical, 29 high, 22 medium, 6 low, 0 unscored; 1 added to CISA KEV Oct 5: 29 critical, 159 high, 207 medium, 22 low, 1 unscored Oct 6: 98 critical, 379 high, 357 medium, 32 low, 156 unscored Oct 7: 52 critical, 117 high, 174 medium, 11 low, 2 unscored Oct 8: 53 critical, 177 high, 245 medium, 25 low, 0 unscored; 5 added to CISA KEV Oct 9: 37 critical, 149 high, 114 medium, 18 low, 6 unscored Oct 10: 77 critical, 136 high, 189 medium, 10 low, 0 unscored Oct 11: 17 critical, 62 high, 141 medium, 14 low, 0 unscored Oct 12: 41 critical, 213 high, 371 medium, 47 low, 0 unscored Oct 13: 163 critical, 1357 high, 731 medium, 27 low, 1 unscored; 2 added to CISA KEV Oct 14: 73 critical, 324 high, 365 medium, 40 low, 43 unscored; 4 added to CISA KEV Oct 15: 44 critical, 206 high, 281 medium, 15 low, 0 unscored; 1 added to CISA KEV Oct 16: 44 critical, 162 high, 228 medium, 20 low, 20 unscored; 2 added to CISA KEV Oct 17: 3 critical, 29 high, 53 medium, 5 low, 0 unscored Oct 18: 9 critical, 58 high, 76 medium, 9 low, 400 unscored Oct 19: 31 critical, 148 high, 240 medium, 33 low, 0 unscored Oct 20: 172 critical, 815 high, 831 medium, 117 low, 0 unscored; 6 added to CISA KEV Oct 21: 50 critical, 211 high, 249 medium, 39 low, 1 unscored Oct 22: 62 critical, 159 high, 152 medium, 29 low, 3 unscored Oct 23: 37 critical, 159 high, 102 medium, 24 low, 170 unscored; 2 added to CISA KEV Oct 24: 11 critical, 23 high, 35 medium, 5 low, 2 unscored Oct 25: 3 critical, 32 high, 67 medium, 31 low, 0 unscored Oct 26: 38 critical, 252 high, 404 medium, 56 low, 14 unscored; 2 added to CISA KEV Oct 27: 88 critical, 303 high, 207 medium, 26 low, 0 unscored; 2 added to CISA KEV Oct 28: 39 critical, 239 high, 262 medium, 35 low, 89 unscored; 2 added to CISA KEV Oct 29: 85 critical, 200 high, 232 medium, 28 low, 2 unscored; 2 added to CISA KEV Oct 30: 50 critical, 224 high, 272 medium, 27 low, 4 unscored; 2 added to CISA KEV Oct 31: 13 critical, 45 high, 54 medium, 1 low, 0 unscored Nov 1: 26 critical, 17 high, 48 medium, 11 low, 0 unscored Nov 2: 35 critical, 211 high, 193 medium, 16 low, 18 unscored Nov 3: 67 critical, 280 high, 344 medium, 38 low, 44 unscored; 1 added to CISA KEV Nov 4: 42 critical, 155 high, 157 medium, 34 low, 28 unscored; 1 added to CISA KEV Nov 5: 39 critical, 184 high, 142 medium, 22 low, 44 unscored Nov 6: 41 critical, 137 high, 217 medium, 44 low, 20 unscored; 1 added to CISA KEV Nov 7: 67 critical, 149 high, 231 medium, 10 low, 16 unscored Nov 8: 20 critical, 85 high, 169 medium, 28 low, 0 unscored Nov 9: 21 critical, 140 high, 170 medium, 51 low, 9 unscored; 3 added to CISA KEV Sep 14 Sep 28 Oct 12 Oct 26 today
Vulnerabilities published per day for the last 63 days by severity, 33,455 in all, and 77 added to CISA KEV.

Just added to CISA KEV

CISA confirms these are being exploited in the wild. Federal agencies get a deadline to patch; you should treat them the same way.

all known exploited
  1. 8.1
     CVE-2026-123158 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (relate…
  2. 9.8
     CVE-2026-116779 FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
  3. 9.8
     CVE-2026-102895 GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
  4. 7.5
     CVE-2026-19868 An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authenticati…
  5. 5.5
     CVE-2024-27834 The issue was addressed with improved checks.
  6. 8.1
     CVE-2026-119977 WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution

Plug it into anything

The same entries as a feed, a JSON API, an MCP server and a lockfile check. No account and no API key.

~ fencer-intel
$ curl -s "https://intel.fencer.dev/feed?filter=critical" 
<rss version="2.0">
  <channel><title>Fencer Intel — Critical</title>
    <item>
      <title>CVE-2026-123158: sshd in OpenSSH before 10.6p2 on Linux, when ...</title>
      <link>https://intel.fencer.dev/CVE-2026-123158</link>
$ curl -s https://intel.fencer.dev/api/v1/entries/CVE-2026-123158 
{
  "id": "CVE-2026-123158",
  "title": "sshd in OpenSSH before 10.6p2 on Linux, when musl libc is...",
  "severity": "high",
  "cvss": {
    "score": 8.1,
    "version": "3.1"
  },
  "kev": {
    "added": "2026-11-09"
  },
  "epss": {
    "score": 0.0101
  },
  "exploits": []
}
$ claude mcp add --transport http fencer-intel https://intel.fencer.dev/mcp 
# tools: search, get_vulnerability, list_feed, check_stack
# your agent checks a package before it installs it
$ curl -s -F lockfile=@package-lock.json https://intel.fencer.dev/api/v1/stack 
# every advisory for the versions you pin, exploited first
# the report has its own feed for new matches

All · PostgreSQL

Newest first, late arrivals on top. Also a feed.

  1. 8.8
    CVE-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code
    PostgreSQLbitnami
  2. 7.2
    CVE-2026-6471 PostgreSQL logical decoding can dlopen arbitrary file
    PostgreSQLbitnami
  3. 4.3
    CVE-2026-6470 PostgreSQL fails to check type USAGE privilege
    PostgreSQLbitnami
  4. 3.8
    CVE-2026-6469 PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
    PostgreSQLbitnami
  5. 8.1
    CVE-2026-6464 PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
    PostgreSQLbitnami
  6. 8.8
    CVE-2026-19385 PostgreSQL pg_dump heap buffer overflow executes arbitrary code
    PostgreSQLbitnami
  7. 8.8
    CVE-2026-18408 PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client
    PostgreSQLbitnami
  8. 4.3
    CVE-2026-18024 PostgreSQL ascii() function reads past end of buffer
    PostgreSQLbitnami
  9. 3.8
    CVE-2026-16241 PostgreSQL ECPG integer underflow can crash the client
    PostgreSQLbitnami
  10. 8.8
    CVE-2026-16239 PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code
    PostgreSQLbitnami
  11. 8.8
    CVE-2026-16238 PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code
    PostgreSQLbitnami
  12. 8.8
    CVE-2026-15742 PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound
    PostgreSQLbitnami
  13. 8.8
    CVE-2026-15741 PostgreSQL expression deparse allows SQL injection via EXTRACT argument
    PostgreSQLbitnami
  14. 4.2
    CVE-2026-14681 PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL
    PostgreSQLbitnami
  15. 8.8
    CVE-2026-14680 PostgreSQL type confusion via "internal" arguments
    PostgreSQLbitnami
  16. 8.2
    CVE-2026-14679 PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory
    PostgreSQLbitnami
  17. 4.3
    CVE-2026-14678 PostgreSQL pg_trgm picksplit reads past end of buffer
    PostgreSQLbitnami
  18. 8.8
    CVE-2026-14677 PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound
    PostgreSQLbitnami
  19. 8.8
    CVE-2026-14676 PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code
    PostgreSQLbitnami
  20. 3.8
    CVE-2026-14673 PostgreSQL amcheck does not clear untrusted search path
    PostgreSQLbitnami
  21. 5.3
    CVE-2026-14672 PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle
    PostgreSQLbitnami
  22. 8.8
    CVE-2026-14670 PostgreSQL plperl tied object heap buffer overflow executes arbitrary code
    PostgreSQLbitnami
  23. 8.8
    CVE-2026-14669 PostgreSQL to_char heap buffer overflow executes arbitrary code
    PostgreSQLbitnami
  24. 8.1
    CVE-2026-14668 PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read
    PostgreSQLbitnami
  25. 4.2
    CVE-2026-14666 PostgreSQL row security caching disregards role modifications
    PostgreSQLbitnami
  26. 8.8
    CVE-2026-14664 PostgreSQL regexp heap buffer overflow executes arbitrary code
    PostgreSQLbitnami
  27. 6.5
    CVE-2026-14663 PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
    PostgreSQLbitnami
  28. 8.8
    CVE-2026-14662 PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound
    PostgreSQLbitnami
  29. 3.7
    CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
    PostgreSQLbitnamijulia
  30. 8.8
    CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection
    PostgreSQLbitnamijulia